Netfilter rule generator library. It's supposed to output iptables-restore compatible format.